Problem with CHAP
Javier Fernando
jcomputacion at hotmail.com
Mon Nov 26 17:04:10 CET 2007
Thanks, i put the users at the top of the users file and connect. I don't read in any place that the users must be added in the top of the file.
Javier.
> To: freeradius-users at lists.freeradius.org> Subject: RE: Problem with CHAP> Date: Mon, 26 Nov 2007 16:30:17 +0100> From: tnt at kalik.co.yu> > >users: Matched entry DEFAULT at line 173> >users: Matched entry DEFAULT at line 185 > > You have added user entries at the end of users file. You should put user> entries towards the front of the users file. If you need to process some> default entries, user entry should have Fall-Through = Yes at the end.> > Ivan Kalik> Kalik Informatika ISP> > > Dana 26/11/2007, "Javier Fernando" <jcomputacion at hotmail.com> piše:> > > >This is the last log:> > > >Thanks.> > > >Javier.> > > > > >radiusd -X :> > > >Nothing to do. Sleeping until we see a request.rad_recv: Access-Request packet from host 10.10.200.252:1645, id=139, length=125 Framed-Protocol = PPP User-Name = "bob" CHAP-Password = 0x010ae11cfe98a4aea0f0244e3337c26de4 NAS-Port-Type = Virtual NAS-Port = 180 Calling-Station-Id = "1141323200" Called-Station-Id = "8003450410" Connect-Info = "TLS-DIALUP" Service-Type = Framed-User NAS-IP-Address = 10.10.200.252 Processing the authorize section of radiusd.confmodcall: entering group authorize for request 8 modcall[authorize]: module "preprocess" returns ok for request 8 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 8 modcall[authorize]: module "mschap" returns noop for request 8 rlm_realm: No '@' in User-Name = "bob", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 8 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 8 users: Matched entry DEFAULT at line 173 users: Matched entry DEFAULT at line 185 modcall[authorize]: module "files" returns ok for request 8rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. modcall[authorize]: module "pap" returns noop for request 8modcall: leaving group authorize (returns ok) for request 8 rad_check_password: Found Auth-Type CHAPauth: type "CHAP" Processing the authenticate section of radiusd.confmodcall: entering group CHAP for request 8 rlm_chap: login attempt by "bob" with CHAP password rlm_chap: Could not find clear text password for user bob modcall[authenticate]: module "chap" returns invalid for request 8modcall: leaving group CHAP (returns invalid) for request 8auth: Failed to validate the user.Login incorrect (rlm_chap: Clear text password not available): [bob/<CHAP-Password>] (from client rasiplan2 port 180 cli 1141323200)Delaying request 8 for 1 secondsFinished request 8Going to the next request--- Walking the entire request list ---Waking up in 1 seconds...--- Walking the entire request list ---Waking up in 1 seconds...--- Walking the entire request list ---Sending Access-Reject of id 139 to 10.10.200.252 port 1645Waking up in 4 seconds...--- Walking the entire request list ---Cleaning up request 8 ID 139 with timestamp 474acfb9Nothing to do. Sleeping until we see a request.> > > >> To: freeradius-users at lists.freeradius.org> Subject: RE: Problem with CHAP> Date: Mon, 26 Nov 2007 15:38:50 +0100> From: tnt at kalik.co.yu> > Can you send the whole debug from the request. I can't see if anything> matched in users file or not.> > Ivan Kalik> Kalik Informatika ISP> > > Dana 26/11/2007, "Javier Fernando" <jcomputacion at hotmail.com> piše:> > >> >I have this users in the users file:> > > > > ># Usuarios de prueba> >chap Auth-Type := Local, Cleartext-Password := "test2007"> >test Auth-Type := Local, Password := "test2007"> >lock Auth-Type := Reject Reply-Message = "Cuenta deshabilitada."> >steve Cleartext-Password := "test"> >javier Cleartext-Password := "test" Service-Type = Framed-User, Framed-Protocol = PPP, Framed-IP-Address = -----------------, Framed-IP-Netmask = --------------------, Framed-Routing = Broadcast-Listen, Framed-Filter-Id = "std.ppp", Framed-MTU = 1500, Framed-Compression = Van-Jacobsen-TCP-IP> >bob User-Password == "test"> >prueba1 Auth-Type := CHAP, Password := "test"> > > > > >I try with all of this users and again have the error:> > > >modcall: leaving group authorize (returns ok) for request 5 rad_check_password: Found Auth-Type CHAPauth: type "CHAP" Processing the authenticate section of radiusd.confmodcall: entering group CHAP for request 5 rlm_chap: login attempt by "javier" with CHAP password rlm_chap: Could not find clear text password for user javier modcall[authenticate]: module "chap" returns invalid for request 5modcall: leaving group CHAP (returns invalid) for request 5auth: Failed to validate the user.Login incorrect (rlm_chap: Clear text password not available): [javier/<CHAP-Password>] (from client rasiplan2 port 2119 cli 1141323200)Delaying request 5 for 1 seconds> > > >THANKS!!!> > > >Javier.> > > > > > > > > >> To: freeradius-users at lists.freeradius..org> Subject: RE: Problem with CHAP> Date: Mon, 26 Nov 2007 14:05:07 +0100> From: tnt at kalik.co.yu> > >When I connect I use this username and password and the radius don't validate the request.> > > No. You didn't use username usuario3. Look at the request:> > User-Name = "chap"> > Ivan Kalik> Kalik Informatika ISP> > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html> >_________________________________________________________________> >Tecnología, moda, motor, viajes,…suscríbete a nuestros boletines para estar a la última> >http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&Brand=WL&RU=http%3a%2f%2fmail.live.com> >> > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html> >_________________________________________________________________> >Tecnología, moda, motor, viajes,…suscríbete a nuestros boletines para estar a la última> >http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&Brand=WL&RU=http%3a%2f%2fmail.live.com> >> > -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
_________________________________________________________________
Tecnología, moda, motor, viajes,…suscríbete a nuestros boletines para estar a la última
http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&Brand=WL&RU=http%3a%2f%2fmail.live.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20071126/b44700c2/attachment.html>
More information about the Freeradius-Users
mailing list